Privacy Policy

Woncomz Co., Ltd. (hereinafter “the Company”) recognizes the importance of users' personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection, as well as all relevant personal information protection laws

The Company shall not collect, use, or provide users' personal information without prior notification and consent. However, if consent is refused, the use of the service may be restricted in whole or in part. Through personal information collection/use notices, the Company informs users about the purpose and method of personal information usage and the efforts to protect it.

Personal Information Collected and Collection Methods
Purpose of Collection and Use of Personal Information
Retention Period and Usage of Personal Information
Procedures and Methods for Destruction of Personal Information
Provision of Personal Information
Delegation of Collected Personal Information
Rights of Minors and Legal Representatives
Installation, Operation, and Refusal of Automatic Data Collection Devices
Technical and Administrative Measures for Protection of Personal Information
Contact for Personal Information Issues
Obligations to Notify
Supplementary Provisions

1. Personal Information Collected and Collection Methods

The Company collects only the personal information essential to provide basic services such as registration, customer support, and service provision, as well as any additional information necessary for more comprehensive service offerings.

1) Items of Personal Information Collected
① The Company collects the following personal information when users register or use game services on the platforms below. (In some games, only login service is provided and no personal data is collected or stored.)

In-house game: required (ID, nickname, password), optional (mobile phone number)

Facebook account game: required (identifier, ID, profile picture, Facebook friend list), optional (mobile phone number)

Apple Game Center account game: Game Center ID, profile picture, nickname

Google account game: required (member number, Google Plus ID, profile picture, nickname), optional (mobile phone number)

Naver account game: required (ID, profile picture), optional (mobile phone number)

※ Users can choose whether to provide optional personal information. However, some services may restrict partial or full service usage depending on optional item provision.

② The following information may be automatically generated or collected during service use or business processing:

Game usage records, access history and timestamps, download logs, payment records, misuse records, suspension history, IP address, cookies

User's mobile device information (model, OS version, unique device ID, carrier info)

IMEI, Google Advertising ID (Android only), device language and country, mobile phone number

③ When using carrier or app market payment methods depending on the user's device, the Company does not collect payment information. However, to resolve complaints regarding payment, delivery, or account retrieval, the following information may be requested:

Service	Reason	Required Data
Paid Service Payment	Payment gateway use	Payment ID, payment amount, payment method
	Mobile phone payment	Subscriber name, approval number, carrier, device ID
	Credit card payment	Card issuer name, payment details
	Event delivery service	Address, contact information

④ In unavoidable payment cases during free/paid services (e.g., restoration or refunds), the Company may request email address, purchase history, and real name/family relationship verification for third-party payments.

2) Methods of Personal Information Collection

Collected via consent during service signup

Collected via separate consent during promotions/events

Automatically collected from platform partners

Collected voluntarily or upon request during payment/support

2. Purpose of Collection and Use of Personal Information

1) The Company uses collected personal information for:

Securing communication channels for notices and complaint resolution

Handling inquiries and processing payments/refunds for paid services

Providing announcements for new services and promotional events

Other content delivery and authentication services (e.g., ID/password recovery)

2) Personal and system-generated data are used for:

New service/product development & customization, demographic-based service/advertising, usage analytics, service statistics, dispute resolution, complaint handling, and limiting abnormal users

3) For paid services, data is used for identity verification and payment processing.

4) For minors, data is used to verify guardian consent for users under 14 and address complaints related to minors.

3. Retention Period and Usage of Personal Information

1) The Company retains user data only while providing services from registration onwards.
Users may request withdrawal or modification via account options or support methods (self-service, phone, email) after identity verification.

If a user withdraws or cancels consent, or if the data purpose is fulfilled or retention period lapses, data is promptly destroyed. However, data is retained for 7 days post-withdrawal before permanent deletion.

2) Pursuant to applicable laws, including the Information and Network Act, the Company may terminate accounts dormant for over a year and proceed with data destruction. A 30-day advance notice will be issued specifying affected data items.

3) Notwithstanding above, certain data is retained for legally mandated periods:

Service usage logs: 3 months

Advertising records: 6 months

Contracts/withdrawals: 5 years

Payment/supply records: 5 years

Inquiry/complaint logs: 3 years

Tax-related records: 5 years

4. Procedures and Methods for Destruction of Personal Information

The Company destroys personal data as soon as its original purpose is fulfilled.

1) Order of destruction

Registration data is retained during the mandatory period per internal or legal requirements, then destroyed (refer to Article 3).

2) Destruction methods

Electronic data: securely deleted using non-recoverable methods

Printed data: shredded or incinerated

5. Providing Personal Information

1) The Company uses data only within stated purposes and does not share it externally without consent. Exceptions include
① When disclosing to third parties, users will be informed and consent obtained
② When necessary for contract fulfillment and consent is impractical
③ When required by law (e.g., investigations)

2) Users consent to sharing data with third-party game providers to address in-app purchase issues.

3) Without consent, data may be shared for
① Billing and fee settlement
② Anonymous statistical/research purposes
③ Legal requirements (e.g., financial, telecommunications, consumer protection, tax, criminal procedure laws)

6. Entrustment of Collected Personal Information

The Company entrusts personal information handling to external specialists as follows:

Entrusted Company:Eduup Co., Ltd.
Task: Customer support and service operations, event item delivery
Retention Period:Until member withdrawal or termination of the contract

Entrusted Company:iHeart Co., Ltd.
Task:SMS message service operation
Retention Period:Until message delivery is completed or termination of the contract

7. Rights of Minors and Legal Representatives

Users under 14 and their guardians may access, modify, delete data, withdraw, or cancel consent anytime. Data use is suspended until corrections are made, and third parties are informed if data has been shared. Deleted data is processed per Article 3 and not used otherwise.

8. Automatic Data Collection Devices

The Company uses cookies for personalized services. Cookies are small text files stored on user devices. Users may disable or delete cookies, though this may impact login-required services.

9. Technical and Administrative Measures for Personal Information Protection

To ensure safety, the Company implements the following technical and administrative measures to prevent the loss, theft, leakage, alteration, or damage of personal information.

1) Encryption of Personal Information

Users’ personal information is protected by passwords, and important data is safeguarded using encryption for files and transmission or security features such as file locking.

2) Technical Measures Against Unauthorized Access

The Company continuously monitors to prevent personal data leaks or damages caused by hacking or computer viruses. Antivirus software is managed regularly to prevent any infringement of personal information.

3) Access Restrictions to Personal Information Processing Systems

The Company implements necessary controls within a systematically organized database system to process personal information.

4) Employee Training on Handling Personal Information

Employees handling personal data receive regular training on new security technologies and their obligation to protect personal information.

5) Management of User IDs and Passwords

User IDs and passwords are, in principle, accessible only by the respective users. The Company is not liable for issues arising from users’ negligence or fundamental internet risks. Users should maintain password security by changing passwords frequently and exercising caution when logging in via public IPs to prevent data leakage.

10. Contact for Personal Information Issues

For inquiries or complaints, contact:

Privacy Officer

Name: Jae-woong Jung

Position: Director

Email: cs@woncomz.com

Privacy Manager

Name: Yong-Je Lee

Dept./Title: Service Team / Team Member