Privacy Protection

This Privacy Protection Policy applies to all personal data processed in our company's applications, websites, gaming services, and offline events. As the data controller, our company collaborates with third parties, including data processors, for data processing.

The data processed in the services complies with the personal data protection laws of the countries we serve.

2. Processing of Personal Information - Scope of Privacy Policy

Our company will not collect data beyond the necessary scope and will not collect specific data without the user's consent.

As described below, depending on your specific use of our services, we will collect information from you, from third parties, and automatically through your use of our services. Some of this information is necessary, while some is optional.

To use our services, we require you to provide your email address or contact information for registration, directly create an account on Kakaogames, or log in via a third-party account (hereinafter referred to as a "third-party account"). When you perform these actions, Kakaogames will collect the following necessary personal information:

Registration and Personal Information:

Google Account: Member identifier value, profile name
Facebook Account: Member identifier value, profile name
Apple Account: Member identifier value
X Account: Member identifier value, profile name
Kakao Account: Member identifier value, profile photo, profile name
Xbox Account: Member identifier value, profile name
PS Account: Member identifier value, profile name
Steam Account: Member identifier value
Epic Games Account: Member identifier value, profile name

Third-Party Account Information:

When you log in via a third-party account, the personal information we collect may depend on your privacy settings for that third-party account.

We do not control how that third party collects, uses, and shares your personal information. For more information, you should review the relevant third party's privacy policy.

When you use our services, the following information may be collected:

Character Name: The character name generated by customers within the game.
Age: For age verification purposes, we will collect the birth dates of users before allowing them to use our services.
Purchases: If you make purchases within our services through the store, we will collect and retain your purchase records and details, but we will not receive your credit card number.
Customer Service: We may collect emails, chat records, attachments, and customer feedback for customer inquiries, complaint handling, other business matters, delivery notifications, and customer support tasks.
Security Authentication: We may collect country/region information and contact information for authentication purposes.
Other Automatically Collected Information: Device identification code. We will collect IP information, unique device identifiers, device IDs, advertising IDs, application IDs, or other identifiers, nicknames, activity and usage records, game scores, points, access logs, misuse records and fraud detection information, device information (model, service provider information, operating system information, language and country/region information), precise location data (GPS, with your consent), domain names, browser types and operating system device types, and other statistical or technical information about your device or the version of our services you use.

3. Use of Personal Information and Legal Bases

The following laws serve as the basis. Additionally, users can withdraw their consent at any time on the basis of consent.

Our company uses your personal information for the following purposes and processes it based on the following legal bases:

3.1 To Enter into and Perform a Contract with You:

Account registration
Providing and operating our services
Processing purchase details and confirming settlements
Addressing your issues

3.2 For Our Legitimate Business Interests:

Responding to your requests, complaints, and correspondence, verifying your identity, processing transactions, providing technical support and troubleshooting, and other customer service purposes
Developing new products and services
Identifying member identities, preventing fraud, and detecting misuse
Sending activity notifications to friends, user retrieval and registration
Better understanding how users access and use our services, responding to user expectations and preferences
Contest management

3.3 For Other Research and Analysis Purposes:

Protecting the rights, health, and safety of others
Determining, exercising, defending our company's legal position and rights
Sending you event information, marketing messages, and advertisements (applicable to Taiwan region)

3.4 To Comply with Legal Obligations:

To comply with legal obligations as required by law or legal proceedings
To comply with binding requests
To comply with children's privacy protection laws

3.5 With Your Consent:

To track your location when using our services
Marketing communications (when not registered for the service)
Sending you event information, marketing messages, and advertisements
Customizing the content and information sent or displayed to you, providing personalized content, and supporting advertising for our services

4. Provision and Sharing of Personal Information

Our company will not sell your personal information. We will share or provide user personal information with third parties under the following circumstances, and all data sharing will be handled in a manner that protects user rights in accordance with the law.

4.1 User Consent

Personal information may only be provided to third parties with the explicit consent of the user. Consent can be withdrawn at any time.

4.2 Compliance with Legal Obligations

Personal information may be provided when required by law, court orders, or regulatory authority requests, in accordance with the relevant laws.

4.3 Business Transfers and Mergers

In the event of a merger, acquisition, asset sale, or other corporate transaction, personal information may be transferred to the transaction counterpart. Users will receive appropriate notice after the transaction is completed.

4.4 Prevention of Illegal Activities and Protection

To prevent fraud, illegal activities, security threats, etc., personal information may be provided to relevant authorities when necessary.

4.5 Aggregated or De-identified Information

Data may be aggregated in a way that does not individually identify users and shared with third parties for marketing, research, and analysis purposes.

4.6 Sharing with Service Providers

Our company may share personal information with trusted third-party service providers for service operation, settlement processing, customer support, etc. They will process data on our behalf, and we will ensure the security and confidentiality of the data through contracts.

5. Service Providers with Whom We May Share Your Personal Information Include:

[Commission for Processing Personal Information]

6. Cookie Policy

1) Cookie Information

Cookies are small text files sent from the server used for website operation to your browser and stored on your computer.

2) Purpose of Cookie Use

Our company analyzes the browsing history and time of both members and non-members visiting our official website to understand and track their interests, track the number of website visits, etc., with user consent, to provide personalized services.

Our company and third-party analytics service providers use tracking technologies such as cookies, web beacons, tags, or scripts to collect statistical data.

In addition to managing the website, to understand how users use the website, our company obtains aggregated data from third-party analytics service providers that use these technologies.

You have the right to prevent cookies from being stored on your hard drive. You can set your browser options to allow all cookies, ask for permission each time a cookie is stored, or prevent all cookies from being stored. However, if users refuse to store cookies, certain services may no longer be available.

[Methods for Enabling or Disabling Cookies]

Chrome
- (PC) Go to the menu in the upper right corner of the browser, click Settings > Privacy and Security > Switch to Cookies and Other Site Data, and choose whether to accept or block cookies.
- (Mobile) In the application screen's upper right corner menu, click Settings > Click Website Settings in Advanced Settings > Switch to Cookies to turn the option to allow cookies on or off.
Edge
- In the browser's right-side options menu (e.g., Settings) > Settings > Click Cookies and Site Permissions in the left menu. In Stored Cookies and Data, choose Cookie and Site Data Management and Deletion. > Enable or disable cookie data storage and reading permissions (recommended).
Safari
- (MacOS) In the menu bar at the top left, click Safari > Settings > From the settings window, switch to Privacy Protection and turn "Block All Cookies" on or off.
- (iOS) Settings > Select Safari in the application list > In Privacy Protection and Security, turn "Block All Cookies" on or off.
Internet Explorer
- Browser's Tools menu > Internet Options > Privacy > Advanced Settings
Google may use external web analytics tools (e.g., Google Analytics) to allow advertisers to publish web advertisements and collect behavioral data.
- Change Google Web Analytics settings: https://tools.google.com/dlpage/gaoptout/
- - For other web analytics tools, block them in their respective ways.
Opt-out of targeted advertising settings:
- Online advertisers providing targeted advertising: Google, Facebook, X
- Behavioral data collection method: Automatically collected when users visit the official website or open the application.
- - Online behavioral targeted advertising: A marketing strategy that provides personalized services to users by analyzing their online behavior and search history, etc.
- Android: Click Privacy Settings, then select Block Ads.
- iOS: Click Privacy Settings, then select "Limit Ad Tracking."
- To change cookie settings, use the cookie settings menu at the bottom of the official website.

7. Age Restrictions

Our company complies with age restriction-related laws when providing services and collecting personal data.

7.1 Prohibition of Collecting Children's Personal Information

Our company will not intentionally collect personal information from children and does not target them with our services.

If it is confirmed that a child has provided personal information, our company will immediately delete that information.

If it is determined that children's personal information has been stored in our company, please exit the service the child is using or immediately contact our data protection department.

7.2 Age Restrictions Applicable in Specific Countries

Our company complies with age restrictions in accordance with relevant laws in each country.

EU: According to the GDPR, users under the age of 16 must obtain consent from a parent or legal guardian.
US: According to COPPA, personal information is not collected from children under the age of 13.
Japan: According to APPI, personal information is not collected from children under the age of 16.
Taiwan: According to PDPA, personal information is not collected from children under the age of 18.
Other Countries: Comply with the corresponding age restriction regulations of the country and enforce restrictions in accordance with specific regional legal requirements.
Depending on the laws of the country where the service is used, additional confirmation procedures may be required, which are measures taken in accordance with the legal requirements of each country.

7.3 Restrictions on Interest-Based Advertising and Targeted Promotions

Our company will not display interest-based advertising or targeted promotions to children.

7.4 Data Deletion Procedures

When the company confirms the collection of children's personal information, it will delete the information as promptly as possible.

Questions about the deletion procedures can be addressed through the following customer service channels.

7.5 Guidance for Parents and Guardians

Our company recommends that parents or guardians monitor and guide their children's online activities.

If a guardian discovers that a child is using our services, please immediately deregister from the service. If you need assistance, please contact us immediately.

This policy applies to all our company's services. We strive to protect children's personal data security by continuously improving privacy protection measures.

When providing services to children, our company will process children's personal information.

7.6 Age Verification Procedures

For children joining the service, our company may implement user age verification procedures.

Age verification may require users to provide information such as date of birth or age, age range, age proof documents (if necessary), etc.

The information collected during the age verification process will comply with legal requirements and will only be used to confirm eligibility for service provision.

After confirming the age, the information used for authentication will be immediately deleted or securely stored.

8. Data Retention Period

Our company adheres to the following standards for the retention period of personal information.

8.1 Retention of Data During Service Provision Period:

Personal data will be retained for the minimum period necessary to provide services while the user retains an account. During this period, the user's personal data will be used for service operation and will be immediately deleted upon account cancellation or service termination.

8.2 Retention of Data to Fulfill Legal Obligations and Contracts

The company may retain personal data as necessary to comply with legal requirements or fulfill contractual obligations. For example, data may be retained for the minimum period required for compliance obligations, dispute resolution, etc.

8.3 Data Deletion Procedures

If you submit a request to delete your account through the "Settings" in the game application or "My Information" on the homepage, we will securely delete your data within a maximum of 7 days.

Additionally, when requesting the deletion of personal data, the data will be securely deleted within a maximum of 14 days and processed in a non-recoverable state. Furthermore, we regularly review the necessity of retaining data and regularly delete or anonymize unnecessary data.

8.4 Retention of Data for Business and Research Purposes

In addition to legal obligations, some data may be retained for a period of time for research and business analysis. Even in such cases, the data will be anonymized or de-identified to ensure that individual identification is not possible.

9. Security of Personal Information

Our company is implementing the following security measures to protect your personal information:

9.1 Technical Protection Measures

Your personal information is protected through encryption technologies (such as TLS, AES, SHA) during processing. Additionally, access to personal information is minimized, and only approved employees are allowed access.

9.2 Physical Protection Measures

The facilities where servers and databases are located are in physically secure locations and are protected by security cameras and access control systems.

9.3 Management Protection Measures

Employees receive regular privacy protection and security training, and a privacy protection officer oversees related work. Additionally, when entrusting personal information processing business to third parties, strict contracts are required to comply with security measures.

9.4 Personal Information Leakage and Infringement Response Plan

In the event of a personal information leakage or infringement incident, an immediate response plan will be implemented to promptly notify the information subject and take measures to minimize damage. Measures will be taken to recover and replace leaked personal information, and relevant authorities will be reported in a timely manner.

9.5 Security Checks and Audits

Security systems are regularly checked through security audits to improve security vulnerabilities. These measures confirm whether privacy protection measures are effectively implemented.

10. User Rights

You may exercise the rights explicitly stated in this Privacy Protection Policy at any time. Your rights regarding personal information are as follows:

10.1 Right to Access and Portability

You may request to access the content of the personal information we collect and its usage details. Additionally, you may request, in a structured format, that we provide the personal information we retain to be sent to other service providers.

10.2 Right to Rectification and Erasure

You may rectify or update your personal information if it is inaccurate or incomplete. Additionally, under specific conditions, you may request that we delete the personal information we retain. This right applies when your personal information is no longer necessary or when required to fulfill legal obligations.

10.3 Right to Restrict Processing

You may restrict the processing of your personal information. For example, you may request restriction of processing if you dispute the accuracy of your personal information or if you need to object to the processing.

10.4 Right to Object to Processing

You may object to the processing of your personal information for specific purposes. In particular, you have the right to object to the processing of your personal information for the exercise of official authority or for direct marketing purposes.

Method to Withdraw Consent for Marketing
- To deactivate application push advertisement messages sent within the game application: Game > Settings > Notifications > Deactivate push notifications

10.5 Right to Object to Automated Decision-Making

You may object to decisions that have a legal impact on individuals as a result of automated processing and may request human intervention in that decision.

10.6 Right to Withdraw Consent for Processing of Personal Information

You may withdraw your consent for the processing of personal information at any time. However, withdrawing consent may affect your use of our services.

10.7 Right to Non-Discrimination

You have the right not to be discriminated against for exercising your personal information protection rights.

10.8 Right to Amend Information Provided to Third Parties

If your personal information has been provided to third parties and you request amendment or deletion of that information, we will immediately notify the third parties to amend the information.

11. International Transfer of Data

For the purposes stated in this Privacy Policy, your personal information should be processed in your home country. However, to provide services, your personal information may exceptionally be transferred to and processed in regions outside your home country.

When your personal information is transferred internationally, our company will take appropriate protection measures in accordance with the relevant laws of that country. For example, legal mechanisms such as standard contractual clauses or privacy protection adequacy decisions will be used to protect personal data.

Accordingly, you consent to the transfer of your personal information to these countries.

Additionally, you have the right to object to the transfer of your personal information at any time, as explicitly stated in this policy.