17/08/2023
privacy policy
My Play Co., Ltd. Privacy Policy
My Play Co., Ltd. (hereinafter referred to as the "Company" or "My Play") complies with the relevant laws and personal information protection regulations of the Republic of Korea that information and communications service providers must comply with, and establishes a personal information processing policy in accordance with the relevant laws and regulations. We are doing our best to protect our rights.
1. Items of personal information to be collected and methods of collection
go. Items of personal information to be collected
The company collects the following personal information for membership registration, smooth customer consultation, and provision of various services.
[When registering as a member]
- Online game service: ID (e-mail address), password, nickname
- Mobile game service: ID, nickname, SNS link information
- When linking SNS accounts: public profile, email address, nickname
- The items of personal information collected may be different depending on the information disclosure standards set when signing up for an SNS account.
- When using the service: name, date of birth, email address, gender, i-PIN number (for i-PIN users), link information (CI), duplicate registration confirmation information (DI), court of law for children under the age of 14 and adolescents under the age of 18 Agent information (e-mail, name, contact information, date of birth, gender, linkage information (CI), duplicate subscription confirmation information (DI))
- For mobile payment consultation: mobile market payment information
When a user uses authentication on an external platform, the company receives and uses the following personal information from the platform.
- When using external platform authentication
When using Facebook authentication, Facebook member number, nickname, profile picture URL
System ID, nickname, profile picture URL when using Google authentication
Player ID when using Apple Game Center authentication
Apple membership number when using Apple authentication
- When registering as a member through external platform authentication, other personal information provided by external platforms other than the above information is not stored in My Play.
In the process of using the service, the following information may be generated and collected.
- IP address, cookie, visit date and time, service use record, illegal use record, payment/purchase record, terminal information (device identification unique information, terminal environment information, advertisement ID, basic statistics on service use), application installation and use Record
When making a paid payment, the following payment information may be collected.
- When paying by mobile phone: mobile phone number
- When paying by credit card: name of the card company, (encrypted) card number
- For payment by bank transfer: bank name, name, account number, contact number
- For payment by bank transfer: bank name, account number
- When paying for gift certificates: Gift certificate ID, password (only processed for the gift certificate company login, not stored in the company)
- When paying by phone: landline phone number, date of birth, gender
- Payment for minors under the age of 19: legal representative's name, date of birth, gender, mobile phone number (in case of mobile phone verification), e-mail address
In the process of using the service, the following information may be additionally collected with the user's consent.
- When consent is obtained for additional collection of personal information
Additional collection types
Name, date of birth, gender, foreign and domestic information, mobile phone number, i-PIN number, duplicate registration confirmation information (DI), encrypted identification information (CI), telecommunication company, credit card company
Name, email, bank name, account number when requesting a refund
When issuing a cash receipt, mobile phone number, cash receipt card number
For customer inquiries and reports
(For e-mail inquiries): (required) e-mail / (optional) mobile phone number (However, some types of inquiries do not selectively collect mobile phone numbers.)
(When inquiring about reporting illegal programs): (Required) Contact phone number, e-mail, inquiry details / (Optional) ID of illegal program use, attached file
(When reporting payment information theft): Evidence documents (Payment information theft damage confirmation copy, masked accident confirmation copy copy, payment receipt copy, deposit and withdrawal statement, copy of bankbook)
(When reporting loss of game money): Email, contact phone number
When delivering event prizes, mobile phone number, e-mail address, address, name, resident registration number (limited to cases where tax processing is required)
me. How to collect personal information
The company collects personal information in the following ways.
- Website, written form, fax, telephone, consultation board, e-mail, event application, delivery request
- Provided by partner companies
- Collection through generation information collection tool
2. Purpose of collection and use of personal information
The company uses the collected personal information for the following purposes.
- We use personal information to provide promised services to users, to authenticate themselves according to service provision, to purchase and pay bills, and to deliver goods and services.
- We use personal information for member management, such as confirmation of intention to join membership, age confirmation and legal representative consent, identification of users and their legal representatives, user identification, confirmation of intention to withdraw from membership, and handling of inquiries or complaints.
- When retrieving contacts, personal information is used to provide automatic friend addition and friend registration using the user's mobile phone number and contact information stored in the user's mobile phone.
- Restriction of use of members who violate laws and regulations and terms of use, prevention and sanctions against acts that impede the smooth operation of the service including illegal use and unauthorized acts, prevention of account theft and fraudulent transactions, and delivery of notices , personal information is used for user protection and service operation, such as record retention for dispute resolution.
- Provision of services according to demographic characteristics, analysis of access frequency, improvement of functions, statistics on service use, and provision of new services that reflect users' propensity to purchase products and service use, interest, and usage history analysis based on service analysis and statistics (Including personalized product recommendation service, etc.), etc., personal information is used.
- Personal information may be used for the purpose of events and promotions, such as providing event information and advertising information.
3. Sharing and Provision of Personal Information
The company uses users' personal information within the scope notified in "2. Purpose of collection and use of personal information", and uses the user's personal information outside the scope without the user's prior consent or, in principle, not disclosed. However, exceptions are made in the following cases.
- When users agree in advance
In the case where the user consents in advance, it is when the user consents to the provision of personal information to a third party while participating in various promotions such as game service use, event application, and user research. Even in this case, the company notifies the user in advance of the person to whom the personal information is provided, the purpose of his/her use, the items of personal information provided, and the period of retention and use of personal information, and obtains explicit and individual consent for this. In all these processes, the company does not collect additional information against the user's will or share information beyond the scope of consent with a third party.
- In case it is necessary for the settlement of charges according to the provision of services
- In accordance with the provisions of laws and regulations, or when there is a request from the investigation agency in accordance with the procedures and methods stipulated in the laws for the purpose of investigation
4. Consignment of personal information processing
The company consigns personal information as follows to improve service, and in accordance with relevant laws and regulations, the company stipulates necessary matters so that personal information can be safely managed in the consignment contract. The company's personal information consignment processing agency and consignment work are as follows.
Consigned business details Personal information retention period and use period
Deborah Studio service development and QA technical support,
Design, log analysis, or withdrawal from membership
Until the end of the consignment contract
5. Period of retention and use of personal information
In principle, the company retains the user's personal information until membership withdrawal. However, the company retains personal information for 7 days after the request for withdrawal from membership in order to prepare for unwanted withdrawal from membership due to personal information theft. In addition, legal representative information collected to comply with related laws is kept until the child/young adult (minor) reaches the age of majority. In addition, the following information is kept for the period specified for the following reasons even after membership withdrawal.
go. Reasons for information retention according to company internal policy
- Illegal use records
* Reason for retention: Prevention of illegal use
* Retention period: 1 year from the date of collection
- Records of excessive immersion
* Reason for retention: Prevention of over-immersion
* Retention period: 1 year from the date of collection
- User authentication record
* Reason for retention: identity verification and age verification, prevention of illegal subscription, customer consultation response
* Retention period: Until the member withdraws from membership (however, if the member withdraws within 3 years from the date of collection, it is stored for 3 years from the date of collection)
For non-members, 3 years from the date of collection (however, 'duplicate registration confirmation information' is stored until the registration restriction is lifted in case of unauthorized registration attempts and registration restrictions)
me. Reasons for information retention according to related laws
If it is necessary to preserve it in accordance with the provisions of related laws, such as the Commercial Act, the Consumer Protection Act in Electronic Commerce, etc., the company preserves member information for a certain period of time as stipulated by the relevant laws and regulations. In this case, the company uses the information to be preserved only for the purpose of preservation, and the retention period is as follows.
- Log records related to service use
* Reason for retention: Communication Secret Protection Act
* Retention period: 3 months
- Records on consumer complaints or dispute handling
* Reason for retention: Act on Consumer Protection in Electronic Commerce, Etc.
* Retention period: 3 years
- Records on contract or subscription withdrawal
* Reason for retention: Act on Consumer Protection in Electronic Commerce, Etc.
* Retention period: 5 years
- Records on payment and supply of goods
* Reason for retention: Act on Consumer Protection in Electronic Commerce, Etc.
* Retention period: 5 years
6. Personal information destruction procedures and methods
In principle, users' personal information is destroyed without delay when the purpose of collection and use of personal information is achieved.
However, the company destroys or separately stores and manages the personal information of members who do not use the service for one year according to the 'personal information validity period system'.
The company's personal information destruction procedures and methods are as follows.
go. destruction procedure
The information entered by the user for membership registration, etc. is transferred to a separate DB after the purpose is achieved (separate filing cabinet in the case of paper) and in accordance with the internal policy and other information protection reasons according to relevant laws (refer to retention and use period) It is destroyed after being stored for a certain period of time.
This personal information will not be used for any other purpose other than being retained except as required by law.
me. Destruction method
on paper Printed personal information is shredded with a shredder or destroyed through incineration.
Personal information stored in the form of electronic files is deleted using a technical method that cannot reproduce the record.
7. Rights of users and their legal representatives and how to exercise them
Users and their legal representatives can inquire or modify the registered personal information of themselves or children under the age of 14 at any time. can be requested. However, in such a case, it may be difficult to use some or all of the service.
Click 'Change Personal Information' (or 'Edit Member Information', etc.) to view and correct personal information of users or children under the age of 14, and click “Withdraw Membership” to cancel membership (withdraw consent) to complete the identity verification process. After the pass, you can directly view, correct, or withdraw.
Or, if you contact the person in charge of personal information protection in writing, by phone or by e-mail, we will take action without delay.
If a user requests correction of errors in personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the result of the correction without delay so that the correction can be made.
The company shall provide for personal information that has been canceled or deleted at the request of the user or legal representative in “5. Period of retention and use of personal information” and processing it so that it cannot be viewed or used for any other purpose.
8. Matters concerning the installation, operation and rejection of the automatic collection device for personal information
The company uses cookies to store and find users' personal information from time to time to provide personalized and customized services to users. A cookie is a small amount of information that a website sends to a user's computer browser (Internet Explorer, Firefox, Chrome, etc.).
When a user accesses the website, the company's computer reads the contents of the cookie in the user's browser, finds the user's additional information on the user's computer, and provides services without additional input such as real name.
Users have the option to install cookies. By adjusting the options of your web browser, you have the option to accept all cookies, check each time a cookie is saved, or reject all cookies. However, if you refuse to store all cookies, you will not be able to use the services provided by the company through cookies.
Users can refuse to collect cookies by setting options in their browser.
- Internet Explorer: Tools > Internet Options > Privacy > Advanced
- Chrome: Settings > Show Settings > Content Settings button in Personal Information > Cookies
※For other browsers, it follows the setting method for each browser.
The company allows online customized advertising providers to collect behavioral information.
- Advertising companies that collect and process behavioral information: Facebook, Google, AppsFlyer, Unity, Vungle, AppLovin, IGAWorks, TNK Factory, Metapsplus, Youappi, Fyber, AdColony
- Behavior information collection method: Automatically collects and transmits when a user visits the site or runs the app
9. Technical and Administrative Measures for Personal Information Protection
The company is taking the following technical and administrative measures to ensure safety so that personal information is not lost, stolen, leaked, forged, falsified or damaged in processing users' personal information.
go. Personal information encryption
The company encrypts personal information such as passwords in accordance with the standards required by laws and regulations, and protects users' personal information by taking separate security measures, such as encrypting files and transmission data for important data.
The password of the Hangame member ID (ID) is encrypted, stored and managed, so only the person knows it, and only the person who knows the password can check and change personal information.
me. Countermeasures against hacking, etc.
The company is doing its best to prevent leakage or damage to members' personal information by hacking or computer viruses. Data are frequently backed up in preparation for damage to personal information, and the latest vaccine program is used to prevent leakage or damage to users' personal information or data. are making it happen. In addition, an intrusion prevention system is used to control unauthorized access from the outside, and we are trying to equip all possible technical devices to secure other systemic security.
All. Minimization and training of handling staff
The company's personal information handling staff is limited to the person in charge, and a separate password for this purpose is given and updated regularly, and the observance of the personal information handling policy is always emphasized through frequent training for the person in charge.
la. Operation of a private information protection organization
The company checks the implementation of My Play personal information processing policy and compliance of the person in charge through the in-house personal information protection organization, etc., and if any problems are found, we are working hard to correct them immediately.
However, the company is not responsible for any problems caused by the leakage of personal information such as ID and password due to the user's negligence or problems on the Internet.
10. Person in charge of personal information protection and contact information
The company designates the person in charge of personal information protection in charge of collecting opinions and handling complaints about personal information, and the contact information is as follows.
Email: [email protected]
Users can report any complaints related to personal information protection that occur while using the company's services to the contact information of the person in charge of personal information protection. The company will promptly and sufficiently respond to users' reports.
The company has opened a window to raise opinions and complaints related to personal information protection. If you have any complaints regarding personal information, please give your opinion to the person in charge of personal information protection above, or the government-run Personal Information Infringement Report Center (tel. (Tel: 02-3480-3570, http://www.spo.go.kr) or the National Police Agency Cyber Terror Response Center (Tel: 182, police.go.kr/www/security/cyber/cyber01.jsp) If there is a dispute regarding personal information, please contact the Personal Information Dispute Mediation Committee (tel: 1833-6972, https://www.kopico.go.kr).
11. Duty of Notice
If there are any additions, deletions, or modifications to the current Privacy Policy, we will notify you through the 'Notices' on the website at least 7 days before the revision. However, if there is a significant change in user rights, such as collection and use of personal information or provision to a third party, it will be notified at least 30 days in advance.
addendum
Article 1 Effective Date
This Privacy Policy is effective from August 17, 2023.
Date of Enforcement of Privacy Policy: August 17, 2023
