Game2Gather Co., Ltd. (hereinafter referred to as "Company") complies with the personal information protection regulations that information and communication service providers must comply with, such as the Information and Communication Network Promotion and Information Protection Act, and does its best to protect user rights. The company has a common personal information processing policy and individual personal information processing policy for each game to inform you of the purpose and method of using personal information provided by customers and what measures are being taken to protect personal information. The common personal information processing policy published on this website contains common information protection of the company, and different matters for each game (items and collection methods, entrustment of personal information processing, and transfer of personal information abroad) are notified and agreed.

According to the provisions of the law, the company discloses a common personal information processing policy and individual personal information processing policy for each game on the company's website or service so that customers can easily check it at any time. When revising the common personal information processing policy, the company will take measures to easily identify major changes and revision dates through the notice on the website, and if individual personal information processing policies for each game are revised, it will be easy to identify major changes and revision dates. When customers sign up for membership or use the services provided by the company, the company prepares consent procedures for collecting and using service terms and conditions, and collects and uses personal information, believing that the customer has agreed to collect and use personal information when choosing "Agreed".

1. Items and methods of collecting personal information.
The company has a separate personal information processing policy for each game to provide services, and detailed personal information collection items and collection methods can be found in the individual personal information processing policy notified within each game.

2. Purpose of collecting and using personal information.
The company will use the collected personal information only for the following purposes, and if the purpose of use changes, the company will implement necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act. However, if the customer agrees to provide personal information to a third party in advance or if there is a basis for relevant laws and regulations, the company may provide the customer's personal information to the outside.

Implementation of a contract on service provision and settlement of charges according to service provision.
Event winning announcement, event prize delivery, content provision, purchase, and payment.
Member management.
Identification based on the use of membership services, prevention of illegal use of defective members, prevention of unauthorized use, age verification, consent from legal representatives when collecting personal information of children under the age of 14, delivery of notices, and confirmation of use of public content in games.
Use for marketing and advertising, partnerships, and consignment businesses.
Development and specialization of new services (products), delivery of advertising information such as events, provision of services according to demographic characteristics, publication of advertisements, identification of access frequency, or provision of statistics and promotion/event services for members.
3. Period of retention and use of personal information.
Regarding the personal information collected with the consent of the member, the company may retain and use the member's personal information while the membership is maintained, and if the member requests withdrawal, it will be completely deleted in the future. However, the company can store member information up to 30 days from the date of withdrawal for recovery and protection of victims in the event of damage caused by theft of personal information, etc., and will be completely. In addition, exceptions shall be made in cases where the consent of members is obtained individually or preserved in accordance with the provisions of related laws, such as the Commercial Act and the Consumer Protection Act in e-commerce.
The company separates and stores member information to protect the personal information of members who have not used the service for a consecutive year (hereinafter referred to as "dormant accounts") under the Information and Communication Network Utilization Act and the Enforcement Decree of the same Act.
If the company needs to preserve the customer's personal information according to the provisions of the relevant laws and regulations, the company keeps the information for a period prescribed by the relevant laws and regulations. (However, records of service usage restrictions are kept during the service period.)
4. Procedures and methods for destroying personal information.
In principle, the company will destroy the information without delay after the purpose of collecting and using personal information is achieved. The procedure and method of destruction are as follows.

Destruction procedure.
If the information entered by the customer for membership must be preserved as prescribed by relevant laws and regulations after the period of personal information retention has elapsed or the purpose has been achieved, the company will move the personal information to a separate database (DB) or store it differently. The company does not use stored personal information for any purpose other than those prescribed by relevant laws and regulations.
Destruction Way.
Personal information stored in electronic file format is deleted using a technical method that cannot play records. Personal information printed on paper is crushed with a grinder or destroyed through incineration.
5. Measures to secure the safety of personal information.
In processing members' personal information, the company is seeking the following technical and administrative measures to ensure safety so that personal information is not lost, stolen, leaked, altered or damaged.

Management measures: Establishment/implementation of internal management plans, minimization of processing staff, regular in-house training for employees, and external training for persons in charge of personal information processing, etc.
Technical measures: management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of latest vaccines and security programs, data backup, etc.
Physical measures: Control of access to and from computer rooms, data storage rooms, etc.
However, even though the company has fulfilled its personal information protection obligation, the company shall not be liable for damages not attributable to the company, such as carelessness of the user or accidents in areas not managed by the company.

6. Providing personal information to a third party.
In principle, the company does not provide your personal information to third parties. However, exceptions are made to the following cases.

If prior consent is obtained,
Where necessary for the settlement of charges, etc. according to the provision of services,
In the case where there is a request from the agency according to the procedures and methods prescribed in the relevant statutes or for investigation purposes,
Case where a specific individual cannot be identified as necessary for statistics preparation, academic research, or market research.

7. Consignment of personal information processing.
The company conducts separate notification and consent procedures for entrusting members' personal information to the trustee to improve services, and details of personal information processing (consignee, consignment work, retention and duration of personal information) can be found in individual personal information processing policies notified within each game.

8. Transfer of personal information abroad.
The company conducts separate notification and consent procedures for the overseas transfer of members' personal information for smooth game service, and details of the overseas transfer of personal information (transfer recipient, previous country, previous purpose, transfer method, previous possession and use) can be found in each game.

9. Rights of users and legal representatives and methods of exercising them.
Members and legal representatives may at any time inquire or modify the personal information of themselves registered or children under the age of 14 (hereinafter referred to as "children") and may request cancellation of membership. If the company needs consent to collect, use, or provide personal information of "children", it obtains the consent of its legal representative. To this end, the company may request the minimum necessary information, such as the name and contact information of the legal representative. The personal information of the legal representative collected in this way is not used for any purpose other than confirming the consent of the legal representative or provided to a third party.
Members and legal representatives may withdraw (withdraw) their consent to provide personal information at any time. Members can withdraw membership by clicking "Membership withdrawal" or "Delete Account" in the service to withdraw consent to provide personal information. Members and legal representatives can inquire and correct personal information to the company's customer center using the "1:1 Inquiry" function in the mail or service. If a member requests correction of personal information, the company does not use or provide the relevant personal information until the correction is completed. In addition, if incorrect personal information is already provided to a third party, the company notifies the third party of the result of the correction process without delay so that the correction can be made.
Personal information deleted at the request of a member or legal representative shall be processed in accordance with the company's terms and conditions of use and shall not be viewed or used for any other purpose.

10. Technical, administrative, and physical protection measures for personal information.
In processing members' personal information, the company is seeking the following technical and administrative measures to ensure safety without losing, stealing, leaking, tampering, or damaging personal information.

The company is doing its best to prevent the leakage or damage of members' personal information by hacking or computer viruses. Data is frequently backed up in case of damage to personal information, and the latest vaccine programs are used to prevent leakage or damage of customers' personal information, and personal information can be safely transmitted on the network through cryptographic algorithms. In addition, we control unauthorized access from the outside using an intrusion blocking system, and we are trying to equip all possible technical devices to ensure stability in the system.
The company always emphasizes compliance with customers' personal information processing policies. In addition, we are trying to check the implementation of the company's personal information processing policy and compliance with the person in charge through an in-house dedicated organization so that if a problem is found, we can correct it immediately. However, the company is not responsible for any problems caused by the leakage of personal information due to the member's carelessness or Internet problems.

11. Person in charge of personal information protection.
Name: Suh Jung Ho
Department name: Technology headquarters
E-Mail : help@game2gather.com
You can report all personal information protection-related complaints arising from using the company's services to the personal information protection manager or the department in charge. The people in charge will respond quickly and sufficiently to the report. If you need a report or consultation on other personal information infringement, please contact the institution below.

12. Civil service regarding personal information.
In addition to regular training, the company continues to make efforts to improve internal guidelines and systems to prevent personal information infringement, and designates a person in charge of personal information protection as follows to protect/manage customers' personal information and handle complaints related to personal information.

Supplementary rule.
This personal information processing policy will take effect on July 1, 2021.