"NokNok Co., Ltd." (hereinafter the "Company") values the personal information of its members, and the "Personal Information Protection Act," "Act on the Protection and Use of Location Information," and the "Act on Promotion of Information and Communications Network Utilization and Information Protection" We are complying with relevant laws and regulations. Through the privacy policy, the company informs you about the purpose and method of using the personal information you provide, and what measures are being taken to protect your personal information. The privacy policy contains the following contents. Article 1 Personal information items to be collected and methods of collection The company collects your personal information as follows for smooth service provision, customer consultation, and various data statistics. 1. Collection items - Game ID, user's nickname, profile picture used, game usage record, access log, payment record (item ID purchased by member, item price, market order number), game version, terminal information (model name, OS type and version) etc.), , service usage information, e-mail (account) used by the user when making an inquiry, age and gender entered by the user when using the service, SNS account name, location information of the user provided by the location information provider Details will be processed in accordance with the "Location Service Terms and Conditions" separately prepared at the time of membership registration.) 2. Collection method - Written form, fax, telephone, e-mail, event application, delivery request, etc. - Provided by partner companies - Collected under the user's consent within the application - Provided by location information service providers Article 2 Purpose of collection and use of personal information The company uses the collected personal information for the following purposes and does not use or use it outside the scope without the user's consent. However, when the user consents to the disclosure of personal information in advance, in accordance with relevant laws, or in the case of a request for information provision by an investigative agency, it is disclosed to the outside. 1) Types of personal information collected when using application games and purpose of use - Type: Member ID, nickname you want to use, profile picture you want to use, gender, date of birth, device information (model name, OS type and version, etc.), game use and access log, game version, location-based information service use record - Purpose: Duplicate membership registration, exchange activities with other users in the game, customer consultation and event guidance, notices, sanctions against bad members, management of members' service use history and interlocking with the in-game system through location information, development of new services, Provision of services according to statistical characteristics and posting of advertisements, verification of service effectiveness, provision of opportunities to participate in events, identification of access frequency, statistics on customer service use, restrictions on the use of bad users, etc. 2) Types of personal information collected when using paid services and purpose of use - Type: payment record (item ID purchased by member, item price, market order number) - Manage payment history and respond to customer inquiries. Article 3 Sharing and Provision of Collected Personal Information The company uses members' personal information within the scope notified in this policy and does not provide it to outside parties. However, the following cases are exceptions. 1) In accordance with the provisions of related laws such as the Telecommunications Framework Act and the Telecommunications Business Act, or when there is a request from the investigation agency in accordance with the procedures and methods prescribed in the Act for the purpose of investigation 2) When it is necessary for statistical preparation, academic research, or market research, and when a specific individual is processed and provided in an unrecognizable form Article 4 Personal information retention and use period The company retains the user's personal information after the user's membership registration and until withdrawal. However, in accordance with the internal policy, the company will keep personal information for 3 months after withdrawal from membership and then destroy it in order to prevent illegal use and preserve consultation records. In addition, personal information that needs to be preserved according to the relevant laws and regulations is kept for a certain period as follows. However, information not stipulated in related laws will be destroyed as soon as the purpose of collection is achieved. 1) Items of personal information to be retained - All items of collection specified in Article 1 of this Privacy Policy are kept. 2) Reason for information storage If it is necessary to preserve it in accordance with the provisions of related laws, such as the Commercial Act, the Consumer Protection Act in Electronic Commerce, etc., the company keeps member information for a certain period of time as stipulated by the relevant laws and regulations. In this case, the retention period is as follows. (1) Records on contract or subscription withdrawal - Act on Consumer Protection in Electronic Commerce, etc., Retention Period: 5 years (2) Records on payment and supply of goods - Act on Consumer Protection in Electronic Commerce, etc., Retention Period: 5 years (3) Records on consumer complaints or dispute resolution - Act on Consumer Protection in Electronic Commerce, etc., Retention Period: 3 years (4) Records of visits - Communication Secret Protection Act, retention period: 3 months (5) Records about identity verification - Act on Promotion of Information and Communication Utilization and Information Protection, Retention Period: 6 months (6) Recording data confirming the use and provision of location information - Act on the protection and use of location information, retention period: 1 year Article 5 Personal information destruction procedure and method In principle, the user's personal information is destroyed without delay when the user withdraws from membership or the purpose of collection and use of personal information is achieved. The company's personal information destruction procedures and methods are as follows. 1. Destruction procedure 1) The information entered by the user for service subscription, etc. is transferred to a separate DB after the purpose is achieved, stored for a certain period of time according to the information protection reasons according to internal policies and other related laws (refer to the period of retention and use), and then destroyed. 2) Personal information will not be used for any other purpose other than being retained unless it is required by law. 2. Destruction method 1) Personal information printed on paper is shredded with a shredder or destroyed through incineration. 2) Personal information stored in the form of an electronic file is deleted using a technical method that cannot reproduce the record. Article 6 Technical/Administrative Protection Measures for Personal Information 1) The company limits the right of access to personal information of members to a minimum number of people, and those people are receiving training related to personal information management. Those who qualify are: - A person who conducts marketing work directly against members - Persons who perform personal information management tasks, such as the department and person in charge of handling personal information inquiries - Persons who need to handle personal information for other business purposes 2) Management measures against hacking - We are doing our best to secure the technical system so that personal information can be safely transmitted and stored on the network through encrypted communication, etc. 3) Member's personal information management and responsibility - The company is not responsible for problems caused by negligence or negligence on the part of the member, and the member must safely manage his/her personal information in order to protect his/her personal information and take responsibility for it. Article 7 Rights of users and legal representatives and how to exercise them Users can inquire, modify, or delete their personal information at any time by email or phone to the person in charge of personal information protection of Knock Knock, and may request to view their personal information. Users can request to suspend the processing of personal information at any time, and in cases where there are special provisions in the law, etc., they can reject the request to suspend processing. Users can withdraw their consent to the collection and use of personal information at any time through ‘withdrawal of membership’. For children under the age of 14, the legal representative has the right to inquire, correct, delete, suspend processing, and withdraw consent to collection and use of children's personal information. If a user requests correction of errors in personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the result of the correction without delay so that the correction can be made. The rights of users and their legal representatives can be requested by phone or e-mail to the person in charge of personal information management. Depending on the user's personal service use activity and consent details, the details provided to a third party can be checked by phone or e-mail, and consent can be withdrawn. Article 8 Personal information manager and personal information department In the protection of personal information, the personal information management department is responsible for any accidents that go against the notices to members due to reasons attributable to the company. However, in spite of taking technical supplementary measures, the company will not take any responsibility for information damage, infringement, or leakage caused by unexpected accidents caused by network risks such as hacking or personal information leakage caused by user negligence. take no responsibility. In order to protect customers' personal information and handle complaints related to personal information, the company has designated the person in charge of personal information management and personal information management as follows. 1) Person in charge of personal information management and person in charge Name: Ha Sang-min Affiliation: Management Support Team E-mail: privacy@noknok.co.kr Phone number: 070-4711-0217 Article 9 Activities to protect youth In order to protect youth from various harmful information, the company has prepared and implemented a youth protection policy so that teenagers under the age of 19 cannot access harmful information in accordance with relevant laws. In addition, the company operates as follows to strictly sanction obscene, illegal, harmful information, and unethical and anti-social behaviors that impede the healthy growth of youth. 1. Establishment of a juvenile protection plan from information harmful to juveniles - The company prepares and applies a separate authentication device for media harmful to juveniles so that juveniles are not exposed to information harmful to juveniles without any restrictions, and takes preventive measures to prevent exposure of harmful information to juveniles. 2. Restrictions on access to youth harmful information and management measures - The company educates information and communications workers on juvenile protection-related laws and sanction standards, how to respond when harmful information is found, and reporting procedures for handling violations. 3. Education for youth protection from information harmful to juveniles for information and communications service workers - The company educates youth protection officers and service personnel on various relevant laws and sanction standards for youth protection, how to respond when harmful information is found, and reporting procedures for handling violations. 4. Counseling for damage caused by information harmful to youth and handling grievances - The company is preventing the spread of damage by arranging professional personnel for counseling and handling grievances caused by harmful information to teenagers. Users may request damage counseling and grievance handling through phone or e-mail referring to the "6. Affiliation, name and contact information of the youth protection officer and person in charge" specified below. 5. Other matters necessary to protect juveniles from information harmful to juveniles - In response, the company participates in the joint efforts of Internet companies to protect youth. 1) Internet Business Code of Ethics for Youth Protection 2) Guidelines for Internet Companies to Protect Youth 6. Person in charge and person in charge of youth protection policy 1) Youth Protection Manager Name: Ha Sang-min Affiliation: Management Support Team E-mail: privacy@noknok.co.kr Phone number: 070-4711-0217 FAX: 070-4739-5961 Article 10 Obligation to notify If there is any addition, deletion or modification of the privacy policy, the company will notify the member through a notice at least 7 days in advance. This privacy policy is effective from July 30, 2013.