Article 1 (Personal Information Collected and Method of Collection)

The Company collects personal information for membership registration, provision of services and customer enquiries, and may ask for personal information for aggregate statistical analysis or prize delivery in connection with surveys and events. As a rule, the Company does not collect sensitive personal information that could infringe users' fundamental rights (race and ethnicity, ideology and creed, place of birth and domicile, political views, criminal record, etc.); where such collection is unavoidable, the user's prior consent is always obtained. In any case, the information you provide is never used for any purpose other than providing the relevant service or the purposes notified to you in advance.

The personal information collected is as follows.

Article 2 (Purpose of Collection and Use)

The Company collects personal information for the following purposes.

Article 3 (Consent to Collection)

The Company obtains members' consent to the collection of their personal information through a consent step covering the Terms of Use and this Privacy Policy during the registration process. By ticking the box "I agree to the Terms and Policies", a member is deemed to have consented to the collection of their personal information.

Article 4 (Use of Personal Information)

The Company uses users' personal information within the scope set out in Article 2 (Purpose of Collection and Use). It does not use the information beyond that scope without the user's prior consent and, as a rule, does not disclose users' personal information externally, except in the following cases.

1. Where the user has given prior consent to disclosure
2. Where required by law, or where requested by an investigative authority in accordance with the procedures and methods prescribed by law for investigative purposes

Article 5 (Provision to Third Parties and Outsourcing)

Article 6 (Retention and Use Period)

While a user remains a member and continues to use the services, the Company retains the user's personal information and uses it to provide the services.

A user's personal information is destroyed in a manner that prevents recovery once the purpose of its collection and use (including temporary purposes such as surveys and events) has been achieved, or when the user deletes it or withdraws their membership.

The Company may retain a member's personal information for one year after termination of the service agreement to prevent abuse or misuse of rights, to handle disputes concerning infringement of rights or defamation, and to cooperate with investigations.

Where retention is required under Korean law, such as the Commercial Act or the Act on Consumer Protection in Electronic Commerce, the Company retains member information for the period prescribed by the relevant law. In such cases the Company uses the retained information solely for the purpose of retention, and the retention periods are as follows.

Article 7 (Destruction Procedure and Method)

Members may view or correct their registered personal information at any time and may request to withdraw their membership. Personal information can be viewed and edited after logging in, via the member information page on the site; all details other than the ID and name can be changed. Members who wish to withdraw can do so on the site. Because withdrawal destroys all registered information, please consider it carefully; withdrawal may also restrict re-registration.

The Company's procedure and method for destroying personal information are as follows.

Article 8 (Rights of Users and Legal Representatives)

Users and their legal representatives may at any time view or edit their own registered personal information, or that of a child under 14 in their care, and may request to cancel their membership.

To view or edit the personal information of a user or a child under 14, click "Edit member information" (or "Change member information"); to cancel membership, click "Withdraw membership". After identity verification, you can view, correct or withdraw directly.

Alternatively, you may contact the data protection officer in writing, by telephone or by email, and we will act without delay.

If a user requests correction of an error in their personal information, the Company will not use or provide that information until the correction is complete. If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction without delay so that it can be corrected.

Personal information cancelled or deleted at the request of a user or legal representative is handled as set out in "Retention and Use Period" and cannot be viewed or used for any other purpose. As data subjects, users may request access to, correction or deletion of, or suspension of processing of their personal information in accordance with applicable law.

The Company will notify the user of the action taken within 10 days. Requests for access, correction, deletion or suspension of processing are accepted by the Company.

Article 9 (Cookies and How to Refuse Them)

A cookie is a small data file sent by an HTTP server to the user's browser and stored on the member's computer. The Company uses cookies to understand members' browser types and patterns of service use, and uses this information to provide members with more useful and convenient personalised services.

Members have a choice regarding cookies. Through your browser settings you can accept all cookies, be prompted each time a cookie is stored, or refuse all cookies. If you refuse cookies, however, you will not be able to use any of the Company's services that require login.

Article 10 (Technical and Administrative Safeguards)

Members' personal information is protected by a password. Only the member knows their account password, and only the member who knows the password can view or change their personal information. Please do not share your password with anyone. We also recommend logging out and closing your browser when you have finished, particularly when sharing a computer with others or using one in a public place, to prevent your personal information from being seen by others. The Company is not responsible for the disclosure of personal information caused by the user's own negligence or by problems inherent to the internet.

The Company takes the following technical and administrative measures to protect personal information.

1. We maintain firewalls and security systems to prevent hacking.
2. Personal information is protected by SSL server certificates when transmitted.
3. Access to personal information is restricted to staff who perform the relevant tasks and those for whom handling personal information is unavoidable in the course of their work; other staff cannot access it.
4. Staff who handle personal information receive regular and ad hoc training.
5. Access records for the personal information processing system are kept and regularly checked and monitored.
6. Protective measures are applied when personal information is printed or copied.

Article 11 (Children's Personal Information)

As a rule, the Company does not collect personal information from children under 14. In special cases it may do so with the consent of a legal representative.

The Company does its utmost to protect members' personal information. In addition to these efforts, members themselves should take care that their password and other details are not disclosed to third parties, particularly when using PCs in public places.

The Company will never ask for your password by telephone or email. Please make sure that only you use your ID and password, and change your password regularly. While the Company does its best to protect personal information, it is not responsible for disclosures caused by the member's own negligence or by causes not attributable to the Company.

Article 12 (Data Protection Officer)

If you have any comments on the Company's Privacy Policy, please email us; we will respond promptly on receipt and inform you of the outcome. The data protection officer is as follows.

Article 13 (Supplementary Provisions)

Any amendment to this Privacy Policy will be announced on the site at least 7 days in advance.

- Effective date of this Privacy Policy: 2025-02-17