Privacy Policy
Article 1. General Rules
(1) Kingkonggames Co., Ltd. (the "Company") collects personal information needed to provide service with the user's consent. Personal information refers to information about an individual who is alive which can be used to identify the said person, including his or her name, Social Security Number, etc. (2) The Company shall take appropriate measures to protect the user's personal information by complying with "Korean Promotion of Use of Information Network and Protection of Information" (the "Information Network Law"), and any privacy regulations in relevant laws. (3) This Privacy Policy is subject to change due to changes in relevant legislation and guidance or change of corporate internal policies, in which case, the Company shall notify users of the change and the reason through the in-game notification system, the official online fan page, etc.
Article 2. What and When Personal Information is Collected
(1) The Company collects the following information to efficiently provide service, gather statistical data, etc. 1. What Personal Information is Collected - Mobile phone number - Device information (the name of the model, the OS version, the unique number of the device), the mobile network operator, the log-in log, and the authentication date, the game version, game play history, payment history 2. When Personal Information is Collected - On the first launch of the game after purchase, during the game play, when connecting to the network, when contacting the Customer Centre, at the time of entering an event (2) The Company collects the following personal information about the legal representative to obtain the legal representative’s consent, if a minor under 14 years of age wants to play the game or a minor under 20 years of age wants to make a payment to use the paid service. - Name, mobile phone number, e-mail address, etc.
Article 3. Purpose of Collecting Personal Information and Use of Information
(1) The Company shall use the information collected within the scope notified herein for the following purposes. As a general rule, the Company shall not use the information outside the same scope or disclose any personal information to others without the user's prior consent unless the user has given prior consent regarding the disclosure of his or her personal information, required by law, or requested by the investigation authority according to the procedures and methods set forth in the law for the purpose of an investigation. 1. Execution of the Contract Regarding the Service Provision and Related Fees Settlement - Provide contents, provide specific tailored service, authenticate purchase, purchase and pay the fees 2. Member Management - Identity verification when using the service, prevent unauthorised use by malicious users and unapproved usage, confirm authentication, retain history for the purpose of settling disputes, resolve complaints, send notifications, identity verification of the legal representative 3. Use in Marketing, Advertisements, and Statistics - Develop new services, provide service and advertise according to the statistical properties, verify the validity of the service, provide events or other useful information and give opportunities to participate in such events, identify the log-in frequency, gather statistics about the user's use of service (2) The Company shall not collect sensitive information such as race and ethnicity, personal principles and beliefs, home town and legal residence, political tendencies, criminal records, health status, sex life, etc. which could infringe on the fundamental rights of the users.
Article 4. Provision of Personal Information
(1) The Company shall not, under any circumstances, use or disclose personal information of any user to others or another corporation / organisation outside the scope notified in [Purpose of Collecting Personal Information and Use of Information] except when given consent by the user or required by law.
(2) If provision of personal information is needed, the affected users shall be notified individually by e-mail, phone, etc. of the receiving entity, why it needs to use the information, which personal information it needs, retention and use period of the information to obtain prior consent. However, provision of personal information is possible without the user's consent if: 1. Provision of personal information is needed for the service fees settlement 2. The information is provided in a personally unidentifiable form for gathering statistics, academic studies, or market research 3. Special regulations exist in the law 4. Required by relevant laws such as the Korean Telecommunications Basic Act, the Korean Telecommunications Business Act etc., or requested by the investigation authority according to the procedures and methods set forth in the law for the purpose of an investigation
(3) The Company may provide personal information to third parties with the user's consent if: 1. The information such as user's name and phone number is needed for the paid contents providers, open market representatives to settle the service fees 2. The personal information of a user who participated in an event is needed by the event organiser
Article 5. Retention and Use Period of Personal Information
(1) As a general rule, the Company shall destroy any personal information after the purpose of collecting personal information and use of information is achieved. However, if the user provided personal information including his or her address, etc. to participate in an event, the information will be retained for 6 months from the event closing date for the purpose of dispatching the event prizes and responding to the participants. (2) The Company will retain personal information for a specific period of time set forth in relevant laws if the information needs to be retained according to the provisions of the relevant law. 1. Retaining Information - The Company will retain all the information listed in Article 2. 1-1. 2. Retention Reasons Pursuant to Relevant Laws The Company will retain user information for a specific period of time set forth in relevant laws if such retention is required by the Commercial Law, Consumer Protection Laws regarding the electronic commerce, and any relevant laws. In such cases, the Company shall not use the retaining information for any purpose other than the one for which the information is retained. The retention period is as follows:
- Records regarding the contract or subscription cancellation: 5 years Retention Reason: Consumer Protection Laws regarding the electronic commerce - Records regarding fees payment and supply of money: 5 years Retention Reason: Consumer Protection Laws regarding the electronic commerce - Records regarding consumer complaints or disputes settlement: 3 years Retention Reason: Consumer Protection Laws regarding the electronic commerce - Records regarding consumer complaints or disputes settlement: 3 years Retention Reason: Consumer Protection Laws regarding the electronic commerce - Records regarding identity verification: 6 months Retention Reason: Korean Promotion of Use of Information Network and Protection of Information - Records regarding visits: 3 months Retention Reason: Korean Protection of Communications Secrets Act
Article 6. Destroy Procedures and Methods of Personal Information
(1) The Company shall destroy any information collected from the users with prior notice and consent after the purpose of collecting personal information and use of information is achieved. Destroy procedures and methods are as follows:
1. Destroy Procedures - The personal information provided by the users shall be retained for a specific period of time and destroyed in the unrestorable manner pursuant to the Protection of Information rules in the internal policies and other relevant laws after the purpose of collecting personal information and use of information is achieved. - The same personal information shall not be used for any purpose other than the one required by laws. 2. Destroy Methods - Any personal information stored in an electronic file format shall be destroyed using technical methods which make the records unrestorable. - Any personal information printed on papers shall be destroyed through a paper shredder or incineration.
Article 7. User's and Legal Representative's Rights, and Exercising the Rights
(1) The user can withdraw the consent he or she has given to the Company by writing to, calling, e-mailing the Personal Information Director. In such case, the Company shall verify the requestor and take necessary actions such as destroying the personal information in question except when otherwise set forth in laws. However, personal information may be destroyed together with the information regarding the use of service of the user. (2) If the user's representative visits the Company and makes a request for the viewing or correction of the user's information, the Company will verify if the person is a genuine representative of the user, and in doing so, the Company may request evidence which proves the fact that the user has designated the person as his or her representative. (3) If the Company finds a reasonable cause to refuse the request for the viewing or correction of the user's personal information as a whole or in part, the Company shall promptly notify the user of this and explain the reason.
(4) The legal representative for a minor under 14 years of age may execute the rights set forth in this Article regarding personal information of himself or herself and the minor under 14 years of age he or she represents.
Article 8. Technical and Administrative Measures to Protect Personal Information
The Company shall take the following technical and administrative measures to protect user's personal information and to prevent the loss, theft, disclosure, alteration or destruction of information.
(1) Technical Measures 1. The Company uses encrypted communication to safely transfer personal information over the network. 2. The Company is continuously making efforts to enhance the level of security by controlling the access to the system, managing permissions, checking vulnerable areas, etc.
(2) Administrative Measures 1. The Company is regularly training its employees who deal with personal information by introducing them to the new security technologies and teaching them about the importance of protecting personal information. 2. The Company restricts the access to personal information of users to the minimum number of employees. These employees include: - Employees who directly deal with the users: employees who are involved in marketing, events, customer support, game operation, product delivery, including the employees of delegated entities or cooperative firms - Employees who perform tasks related with managing personal information such as Personal Information Director - Employees who cannot avoid handling personal information whilst doing his or her duty 3. If any personal information is disclosed, altered or destroyed due to negligence of internal managers or some technical errors, the Company shall promptly notify the affected users and take appropriate measures. However, the Company is not responsible for any outcome of the member's doings.
Article 9. Contacting Personal Information Director and Manager
The Company has designated Personal Information Director and Manager to protect its members' personal information and resolve complaints related to personal information. If you have any inquiries about personal information, please contact Personal Information Director or Manager shown below. The Director or Manager will be happy to answer all your questions.
[Personal Information Director] Name: Ko, Myungkwan E-mail:[email protected]
[Personal Information Manager] Name: Ko, Myungkwan E-mail:[email protected]
With regard to other reports on infringement of personal information and counselling, please contact the following organisations: - Personal Information Dispute Mediation Committee (www.1336.or.kr / 1336) - Personal Information Protection Mark Certification Committee (www.eprivacy.or.kr / 82-2-580-0533~4) - e-People (www.epeople.go.kr) - Cyber Terror Response Center of the National Police Agency (www.ctrc.go.kr / 82-2-392-0330) The user may report any personal information related issues arising from the use of the Company's service to Personal Information Director or Manager, or through Customer Centre of the Company. The Company will respond fully to the member's report as soon as possible.
Article 10. Notification of Amendment to the Policy
If any additions, deletions, and alterations are made to the policy in response to the changed law policies or security technologies, the Company shall notify users of the change and the reason through a notification, the official online fan page, etc. at least 7 days before the new Privacy Policy takes effect.
Additional Rule This Privacy Policy takes effect as of August 1, 2014.